<%@page import="java.net.URLEncoder"%>
<%@page import="java.net.URLDecoder"%>
<%@page import="java.sql.ResultSet"%>
<%@page contentType="text/html" pageEncoding="UTF-8"%>
<jsp:useBean id="database" scope="request" class="accessibleworldsdatabase.AccessibleWorldsDatabaseJavaBeans"/>
<jsp:useBean id="des" scope="request" class="accessibleworldsdes.AccessibleWorldsDESJavaBeans"/>
<%try {

String accessCode = request.getParameter("accessCode");

if(!(accessCode==null || "".equals(accessCode))) {
	
    accessCode = des.decryptString(session.getId(), accessCode);
    accessCode = URLDecoder.decode(accessCode, "UTF-8");

    if(des.getAndroidAccessCode().equals(accessCode) || des.getComputerAccessCode().equals(accessCode)) {
    	
        String userID = request.getParameter("userID");
        String topic = request.getParameter("topic");
        String message = request.getParameter("message");
                
        if(!(userID==null || "".equals(userID) || 
        		topic==null || "".equals(topic) || message==null ||"".equals(message))) {
            
            userID = des.decryptString(session.getId(), userID);
            topic = des.decryptString(session.getId(), topic);
            message = des.decryptString(session.getId(), message);
            
            userID = URLDecoder.decode(userID, "UTF-8");
            topic = URLDecoder.decode(topic, "UTF-8");
            message = URLDecoder.decode(message, "UTF-8");
            
            database.connect(des.decryptString(des.getServiceSecretKey(), database.getEncryptedPassword()));
            
            String SQL =
            "INSERT INTO Admin_Messages"+
            	" (User_id"+
            	" ,Topic"+
            	" ,Message)"+
            	" VALUES"+
            		" (\""+userID+"\""+
            		" ,\""+topic+"\""+
            		" ,\""+message+"\")";
                        
			database.updateSQL(SQL);
            
            String output = URLEncoder.encode("OK","UTF-8");
            
            output = des.encryptString(session.getId(),output);
            out.print(output);
            
            database.closeConnection();
       }
    }
}
} catch (Exception ex) {}%>